As part of improving OpenDaylight's inputs into supply chain security, generate an SBOM for all artifacts built by maven, so they can be signed and published to Maven Central.